新的基于Huffman编码的追踪方案  

New IP traceback scheme based on Huffman codes

作　　者：罗莉莉[1] 谢冬青[1] 占勇军[1] 周再红[1] 

机构地区：[1]湖南大学计算机与通信学院,长沙410082

出　　处：《计算机应用研究》2007年第10期125-127,共3页Application Research of Computers

基　　金：国家自然科学基金资助项目(60373085)

摘　　要：面对DDoS攻击,研究人员提出了各种IP追踪技术寻找攻击包的真实源IP地址,但是目前的追踪方案存在着标记过程中的空间问题、追踪源是否准确及追踪所需包的数量等问题。提出一种新的基于Huffman编码的追踪方案,可以节省大量的存储空间,提高空间效率,而且当遭遇DoS(拒绝服务攻击)和DDoS的攻击时能迅速作出反应,仅仅收到一个攻击包即可重构出攻击路径,找到准确的攻击源,将攻击带来的危害和损失减小到最低程度。Confronting DDoS attack, various IP traceback techniques to find out the real source of attacking packets have been proposed by researchers, but there are some problems such as space issue in marking,whether or not right about IP source,the number of packets required to reconstruct the path and so on. This paper presented a new IP traceback scheme based on Huffman codes, which could save on large memory space and improve space efficiency, furthermore, when be attacked by DoS and DDoS, it could react quickly, and could find out exact resource to reconstruct the path after receiving only one attacked packet, accordingly, minimize the damage of attack.

关 键 词：分布式拒绝服务攻击 攻击源追踪 哈夫曼编码 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]